# Definitive Final Dockerfile
FROM n8nio/n8n:latest

# Copy Aiven CA certificate into container
COPY ./AivenCA.pem /usr/local/share/ca-certificates/AivenCA.crt
RUN update-ca-certificates || true

# Tell the underlying Node.js runtime to trust our custom CA for all connections.
ENV NODE_EXTRA_CA_CERTS=/usr/local/share/ca-certificates/AivenCA.crt

# --- Basic n8n Settings ---
ENV N8N_PORT=7860
ENV N8N_HOST=0.0.0.0
ENV N8N_BASIC_AUTH_ACTIVE=false
ENV N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true


# Expose the port
EXPOSE 7860